This week Adobe have published an new Adobe Flashplayer version 11.2.202.285. There were security bugs closed.

As root in console:

Quote:

update-flashplugin-nonfree -iv

Greetings
polix

DonKult

Post subject: RE: Flashplayer update Posted: 17.05.2013, 20:28

Team Member

Joined: 2010-09-02
Posts: 484

Status: Offline

If you use iceweasel (aka Firefox) I can recommend the hidden setting "plugins.click_to_play". You can activate it by opening the page "about:config", confirming the warning, type "plugins.click_to_play" into the searchbar and doubleclick on the setting to toggle it to "true".

With that enabled you have instead of a directly loaded flash/adobe/xine/… plugin a grey box which you can click to load the plugin (or not). Not only handy from a security point, but also from a no more flashbanner ads, videos which start to play automatically in just opened tabs, … point of view.

This feature should be in 17 which is in sid, but newer version gradually improve it as it not yet completed.

It doesn't remove the need to keep your plugins up-to-date of course, but if the plugins aren't used for "useless" stuff, this useless stuff can't compromise your system at least.

_________________MfG. DonKult
"I never make stupid mistakes. Only very, very clever ones." ~ The Doctor

Lat

Post subject: RE: Flashplayer update Posted: 26.05.2013, 03:12

Joined: 2010-09-19
Posts: 177

Status: Offline

I've seen this on Android when the plugins are disabled, but never thought this could be possible without an add-on on the desktop. Thanks for this tip, DonKult!